Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: 9Fd0HeXl89j9zXl9Ry3is/ECRhX4F3oHNs5L2+kQIaE=
Subject key identifier: A9:54:9F:6A:CA:8E:CF:69:49:8A:C4:24:DD:09:15:5A:6A:F3:96:C5
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019E1FEC769E7B6FF3418443510175062C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 06A2
Signing time: Wed 13 May 2026 06:00:50 +0000
Manifest this update: Wed 13 May 2026 06:00:50 +0000
Manifest next update: Thu 14 May 2026 06:00:50 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: rLjQuGQL7ahX8HV9h1zVWz09bcuiDL+tpzDxJP1sGlE=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:76:9e:7b:6f:f3:41:84:43:51:01:75:06:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: May 13 06:00:50 2026 GMT
Not After : May 14 06:00:50 2026 GMT
Subject: CN=a9549f6aca8ecf69498ac424dd09155a6af396c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:90:4f:df:a0:c5:c7:c6:b6:20:6d:11:84:
0b:d4:20:35:1e:19:bb:0d:a0:dc:7f:2e:69:5e:e4:
d4:84:5a:ca:b9:e2:2c:0f:b7:ae:48:84:d1:5e:78:
e5:17:b3:04:8f:ef:48:c0:3c:d5:dd:44:95:5a:40:
e7:aa:3b:e7:6f:00:0b:f0:3f:b5:43:ff:17:9a:c8:
56:d9:13:44:0d:ea:2f:0c:e8:cd:d7:1f:fd:f8:ce:
0b:cd:7a:a5:a3:0a:fc:08:71:cf:34:4f:50:eb:47:
e0:78:75:d3:95:87:b3:59:60:61:be:2c:61:69:7c:
3d:85:48:8e:f9:19:cb:82:44:d6:1a:e4:01:b6:4f:
e3:69:58:09:71:35:f0:82:c1:ff:8a:8f:2a:bd:e7:
83:8a:c6:52:97:60:59:70:33:da:30:a6:2a:c8:96:
92:59:8a:0b:46:a1:4e:25:04:47:30:f3:73:a4:c1:
5e:06:e9:81:b5:ff:01:d0:dc:ed:81:0b:54:6b:5c:
14:fa:2e:36:14:10:79:59:fd:59:98:fc:0a:ae:c6:
c6:49:9b:c4:2e:e7:fe:10:ba:14:86:07:38:43:08:
16:e9:29:0d:62:ff:14:82:44:96:c8:8f:0e:a6:7b:
8d:89:d6:b4:40:e6:10:cd:0a:28:71:0c:65:1b:53:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:9F:6A:CA:8E:CF:69:49:8A:C4:24:DD:09:15:5A:6A:F3:96:C5
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:b3:3e:ca:e6:6f:18:b8:5d:57:70:f9:df:c8:48:4b:d5:
60:c7:a6:98:94:0b:aa:f1:d3:ae:57:39:17:6f:ab:c6:3d:bd:
c3:97:ef:fb:21:ad:5f:5e:a9:c2:15:0d:b4:bd:de:5a:33:d0:
70:27:55:5e:2d:c7:b6:c9:07:a2:00:12:1e:79:5b:e0:7d:f9:
84:7b:76:0d:08:97:ed:a4:7b:60:50:f9:ce:61:ae:84:3d:93:
7e:2f:c7:c7:bb:3e:26:f6:21:37:ed:e9:3d:a7:23:a5:4b:07:
b4:71:f3:90:be:da:ab:f9:57:a3:61:64:2f:65:dc:f5:fd:47:
f1:11:20:42:d3:fd:8b:16:6b:9c:81:a4:10:ea:af:1c:5e:ec:
bd:c1:7d:67:57:3f:f9:b4:f5:cd:0f:c0:6c:33:f0:56:0b:b8:
67:2b:85:5c:f2:a9:0e:05:da:9c:8c:db:b0:77:fb:fd:5d:47:
cf:ac:14:19:6e:77:9d:03:4a:a3:cf:a7:e7:7e:76:e6:b0:29:
bd:07:2b:fd:1d:d1:b1:b1:be:55:5d:b6:fe:95:b3:f7:36:ba:
19:1a:7c:85:db:fe:ac:4a:e3:77:3f:c2:2e:6b:7b:3c:40:6e:
e5:ca:00:eb:08:a5:b1:cb:f5:05:d1:ef:8b:41:d3:38:15:7c:
2e:e6:75:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7Haee2/zQYRDUQF1BiwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjE0N2Y2N2U4Nzk1ZDk1OWVkMzUzMDM5NmQxMjU2MDU1
YjEyNmUwHhcNMjYwNTEzMDYwMDUwWhcNMjYwNTE0MDYwMDUwWjAzMTEwLwYDVQQD
EyhhOTU0OWY2YWNhOGVjZjY5NDk4YWM0MjRkZDA5MTU1YTZhZjM5NmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcGQT9+gxcfGtiBtEYQL1CA1Hhm7
DaDcfy5pXuTUhFrKueIsD7euSITRXnjlF7MEj+9IwDzV3USVWkDnqjvnbwAL8D+1
Q/8XmshW2RNEDeovDOjN1x/9+M4LzXqlowr8CHHPNE9Q60fgeHXTlYezWWBhvixh
aXw9hUiO+RnLgkTWGuQBtk/jaVgJcTXwgsH/io8qveeDisZSl2BZcDPaMKYqyJaS
WYoLRqFOJQRHMPNzpMFeBumBtf8B0NztgQtUa1wU+i42FBB5Wf1ZmPwKrsbGSZvE
Luf+ELoUhgc4QwgW6SkNYv8UgkSWyI8OpnuNida0QOYQzQoocQxlG1MvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlUn2rKjs9pSYrEJN0JFVpq85bFMB8GA1UdIwQY
MBaAFGOxR/Z+h5XZWe01MDltElYFWxJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYt
MGYyYzMzNGU1ZTA1LzEvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYtMGYyYzMzNGU1ZTA1
LzEvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTKzPsrm
bxi4XVdw+d/ISEvVYMemmJQLqvHTrlc5F2+rxj29w5fv+yGtX16pwhUNtL3eWjPQ
cCdVXi3HtskHogASHnlb4H35hHt2DQiX7aR7YFD5zmGuhD2Tfi/Hx7s+JvYhN+3p
PacjpUsHtHHzkL7aq/lXo2FkL2Xc9f1H8REgQtP9ixZrnIGkEOqvHF7svcF9Z1c/
+bT1zQ/AbDPwVgu4ZyuFXPKpDgXanIzbsHf7/V1Hz6wUGW53nQNKo8+n53525rAp
vQcr/R3RsbG+VV22/pWz9za6GRp8hdv+rErjdz/CLmt7PEBu5coA6wilscv1BdHv
i0HTOBV8LuZ1jg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:46:15 2026 by rpki-client